# Security policy

Please report vulnerabilities privately through GitHub's
[private vulnerability reporting](https://github.com/k4lleanka/resumux/security/advisories/new),
not in public issues.

Include what an attacker can do, the conditions it needs (for example, whether
it requires a valid token), and how to reproduce it. You will get a reply
within a week.

Only the latest release is supported. Before 1.0, fixes go into the next
release rather than being backported.